BIG-IP PSM

BIG-IP WebAccelerator

BIG-IP WOM

BIG-IP Edge Gateway

The 10000 Series Platform

About 10000 Series models

The BIG-IP®10000 Series
platform is a powerful system that is capable of managing traffic for any size
of enterprise.
This platform series includes models
that support either hard disk drives (HDDs) or solid-state drives (SSDs).

F5 offers three performance levels of SSL offload in
the 10000 Series: the 10000s, 10200v, and 10200v-SSL. The 10200v-SSL platform
features high-performance SSL hardware that frees servers from the task of
encrypting and decrypting data.

The 10000 Series platform is available with a
FIPS-certified hardware security module (HSM) as a factory-installed option
(10200v-FIPS and 10350v-FIPS). The 10150 Series platform
is available in Network Equipment-Building System (NEBS) compliant versions
(10150s-NEBS and 10350v-NEBS).

Note: FIPS is not supported in
vCMP guests.

Please see the data sheet at https://f5.com/products/platforms
for more information.

About the platform

Before you install this platform, review information
about the controls and ports located on both the front and back of the platform.

On the front of the platform, you can reset the unit using the LCD control
buttons and view the
indicator LEDs for disk drive access. You can also use the front-panel
LEDs to assess the condition of the platform. On the back, you can power off
the unit.

Front view of the 10000 platform

Management 10/100/1000 port

USB ports

Console serial port

Serial (hard-wired) failover port

1/10G SFP+ ports

40GbE QSFP+ fiber ports

Indicator LEDs

LCD display

LCD control buttons

Disk drive bay 1

Disk drive bay 2

The back of the platform includes two AC power
supplies and the fan tray.

Back view of the platform

Power input panel 1

Power input panel 2

Fan tray

Chassis ground lugs

Hardware included with the platform

This platform should include all of the hardware components listed
here.

Quantity

Hardware

2

Power cables (black), AC power only

Note: The power cables included with this unit are
for exclusive use with this unit and should not be used with other electrical
appliances.

2

DC terminal block plug, DC power option only

1

RJ45 to RJ45 failover cable, CAT 5 crossover (blue)

1

RJ45 to DB9 console port cable (beige)

1

RJ45F to RJ45M rolled adapter (beige)

1

Quick-install rail kit (left and right rails)

2

Rail lock brackets with captive screw (left and
right)

1

Front-mounting kit (left and right brackets)

1

Front bezel

2

SFP+ transceiver modules

Peripheral hardware requirements

For each platform, you might need to provide additional peripheral
hardware. If you plan to remotely administer the system, it would be helpful to
have a workstation already connected to the same subnet as the management
interface.

Type of hardware

Description

Network hubs, switches, or connectors to connect to the
platform network interfaces

You must provide networking devices that are compatible
with the network interface cards that are installed in the
platform. You can use either 10/100/1000/10000-Gigabit or
40-Gigabit Ethernet switches.

External USB CD/DVD drive or USB flash drive

You can use any USB-certified CD/DVD mass storage device or
a USB flash drive for installing upgrades and for system
recovery.

Note: External CD/DVD drives must be
externally powered.

Serial console

You can remotely manage the platform by connecting to a
serial console terminal server through the console port.

Important: In the event that network access is
impaired or not yet configured, the serial console might
be the only way to access the unit. You should perform all
installations and upgrades using the serial console, as
these procedures require reboots, in which network
connectivity is lost temporarily.

Management workstation on the same IP network as the
platform

You can use the default platform configuration if you have
a management workstation set up.

LCD panel

The LCD panel provides the ability to manage the unit without attaching a
console or network cable.

The LCD panel and control buttons

About the LCD menus

There are three menus on the LCD panel. You can configure the display options to meet
your needs.

LCD config menu

You can use the LCD config menu to adjust the display properties of the
LCD panel.

Option

Description

Heartbeat

Enables (checked) or disables (unchecked) the heartbeat
panel on the LCD. This heartbeat does not affect the failover
mechanism of the system.

Backlight

Specifies an LCD screen backlighting option. Select from
these options:

ON enables the backlight.

GRAY enables the software to specify when the
backlight is illuminated.

OFF disables the backlight.

Contrast

Sets the contrast of the LCD.

On Brightness

Adjusts LCD backlight brightness.

Off Brightness

Controls the brightness of the LCD when the backlight is
off.

System menu

You can use the System menu to view options for rebooting, halting, and
netbooting the hardware. This menu also provides options for configuring the
management interface.

Option

Description

DHCP

Controls the use of DHCP. Select from these options:

disabled (default)

enabled

Management

Changes the management interface information. Select from
these options:

Address Type indicates whether to use an IPv4 or IPv6
address.

Mgmt IP sets the management interface IP address. You
can use an IPv4 or IPv6 address.

Prefix Length sets the length of the routing prefix
for the IPv4 or IPv6 management IP address.

Mgmt Gateway sets the default route for the management
interface. This route is necessary if you plan to
manage the unit from a different subnetwork.

Commit saves your changes.

Serial Speed

Changes the baud rate of the management serial port. Select
from these options:

9600

19200 (default)

57600

115200

Reboot

Reboots the unit.

Halt

Halts the unit.

Netboot

Boots the unit over an IP network. Select this option if
you are installing software from a PXE server.

Screens menu

You can use the Screens menu to specify the information that is displayed
on the default screens.

Option

Description

DateScreen

Displays the date and time.

InfoScreen

Displays the information screen.

RaidScreen

Displays the RAID status screen.

Note: Not available on solid-state drive
(SSD) platforms.

VersionScreen

Displays product version information.

Using the LCD panel

Put the LCD panel into Menu mode to manage the platform using the LCD menus and
control buttons.

Press the X button to activate Menu mode for the LCD.

The Left Arrow, Right Arrow, Up Arrow, and Down Arrow buttons are
functional only when the LCD is in Menu mode.

Pausing on a screen

Normally, the screens cycle on the LCD panel at a constant rate, but you can pause
on a specific screen.

Push the Check button to toggle the LCD screen between Hold and
Rotate modes.

In Hold mode, a single screen is displayed. The Rotate mode changes
the screen displayed on the LCD every four seconds.

Powering on the unit

Use the LCD control buttons to power on the unit.

Press the Check button to power on a unit that is shut down.

Halting the unit

Use the LCD control buttons to halt the unit. You should halt the unit
before you power it down or reboot it using the LCD menu options.

Press the X button, then use the arrow keys to navigate to the System
menu.

Press the Check button.

Navigate to the Halt menu.

Press the Check button.

Press the Check button again at the confirmation screen.

Wait 60 seconds before powering the machine off or rebooting it.

Putting the unit in standby mode

Use the LCD control buttons to put the unit into standby mode.

Hold the X button for four seconds to put the unit in standby mode
and power off the host subsystem.

F5® recommends that you halt the system before
you power off the system in this manner.

Resetting the unit

Use the LCD control buttons to reset the unit.

Hold the Check button for four seconds to reset the unit.

You should only use this option after you halt the unit.

Clearing alerts

Use the LCD control buttons to clear alerts from the LCD screen.

Press the Check button to clear any alerts on the LCD screen.

You must clear any alerts on the screen before you can use the LCD
panel.

Indicator LEDs

The behavior of each LED indicates the status of the system.

Status LED

The status LED indicate the operating state of the system.

State

Description

off/none

System is halted and powered down.

green solid

System is running in normal mode. Also indicates that the
system is in an Active state of a device group.

yellow solid

System is running in an impaired mode. The condition is not
considered to be significant enough to be considered an alarm
condition. Also indicates that the system
is the Standby member of a device group.

yellow blinking (with traffic)

The system is not under host computer control. This might
be due to the host being halted or in EUD mode, or due to a
software or hardware problem that interferes with the host's
control of the LED.

Alarm LED

The alarm LED indicate system alarm conditions and the severity of the
alarm condition.

There are five levels of messages.

Note: The alarm LED might continue to display until alerts are
cleared using the LCD panel.

State

Description

off/none

Informational or no alarm conditions present. System is
operating properly.

yellow solid

Warning (0). System may not be operating properly, but the
condition is not severe or potentially damaging.

yellow blinking

Error (1). System is not operating properly, but the
condition is not severe or potentially damaging.

red solid

Alert (2) or Critical (3). System is not operating
properly, and the condition is potentially damaging.

red blinking

Emergency (4). System is not operating, and the condition
is potentially damaging.

Power supply LEDs

The power supply LEDs indicate the operating state of the power supplies.

Power 1 state

Power 2 state

Description

green solid

green solid

Power supply is present and operating properly. Also
indicates when the system in is power standby mode.

yellow solid

yellow solid

Power supply is present, but not operating
properly.

off/none

off/none

No power supply present.

Indicator LED behavior

The indicator LEDs behave in a specific manner to indicate system or
component status.

Behavior

Description

off (none)

LED is not lit and does not display any color.

solid

LED is lit and does not blink.

blinking

LED turns on and off at a regular frequency.

intermittent

LED turns on and off with an irregular frequency and might sometimes
appear solid.

Defining custom alerts

The /etc/alertd/alert.conf and the
/config/user_alert.conf files on the BIG-IP® system define alerts that cause the indicators to
change. The /etc/alertd/alert.conf file defines standard
system alerts, and the /config/user_alert.conf file
defines custom settings. You should edit only the
/config/user_alert.conf file.

Open a command prompt on the system.

Change to the /config directory.

cd /config

Using a text editor, such as vi or Pico, open the
/config/user_alert.conf file.

Edit the file, as needed.

For example, add these lines to the end of the file to create a
custom alert in which the front panel LEDs indicate when a node is
down:

Platform interfaces

Every platform includes multiple interfaces. The exact number of interfaces
that are on the system depends on the platform type.

Each interface on the platform has a set of properties that you can configure,
such as enabling or disabling the interface, setting the requested media type
and duplex mode, and configuring flow control.

About managing interfaces

You can use the Traffic Management Shell (tmsh) or the
BIG-IP® Configuration utility to manage platform
interfaces.

Viewing the status of a specific interface using tmsh

You can use tmsh to view the status of a specific
interface on a platform.

Open the Traffic Management Shell (tmsh).

tmsh

Change to the network module.

net

The system prompt updates with the module name:
user@bigip01(Active)(/Common)(tmos.net)#

Display the current status of a specific interface.

show interface <interface_key>

This is an example of the output that you might see when you
run this command on interface 1.1:

Viewing the status of all interfaces using the Configuration utility

You can use the BIG-IP® Configuration utility to
view the status of all interfaces on the platform.

On the Main tab, click
Network > Interfaces > Interface List.

This displays the list of available interfaces.

On the menu bar, click Statistics.

The Statistics screen for all interfaces opens.

About interface media type and duplex mode

All interfaces on the system default to auto-negotiate speed and full duplex
settings. We recommend that you also configure any network equipment that you
plan to use with the system to auto-negotiate speed and duplex settings. If
you connect the system to network devices with forced speed and duplex
settings, you must force the speed and duplex settings of the system to match
the settings of the other network device.

Important: If the system is attempting to auto-negotiate interface
settings with an interface that has the speed and duplex settings forced
(that is, auto-negotiation is disabled), you will experience severe
performance degradation. This applies to 10GbE and 40GbE interfaces.

By default, the media type on interfaces is set to automatically detect speed
and duplex settings, but you can specify a media type as well. Use the
following syntax to set the media type:

tmsh modify net interface <interface_key> media <media_type> | auto

If the media type does not accept the duplex mode setting, a message appears.
If media type is set to auto, or if the interface does not
accept the duplex mode setting, the duplex setting is not saved to the
/config/bigip_base.conf file.

Important: Auto-MDI/MDIX functionality is
retained when you manually configure an interface to use specific speed and
duplex settings. You can use either a straight-through cable or a crossover
cable when media settings are forced, and you will be able to successfully
link to either DTE or DCE devices.

Valid media types

This table lists the valid media types for the tmshinterface command.

Note: This platform might not support all of the media type
options that are available in the Traffic Management Shell
(tmsh).

10BaseT half

100BaseTX full

10BaseT full

1000BaseLX full

10GBaseER full

1000BaseCX full

10GBaseLR full

1000BaseT half

10GBaseSR full

1000BaseT full

10GBaseT full

1000BaseSX full

10SFP+Cu full

auto

40GBaseSR4 full

none

40GBaseLR4 full

no-phy

100BaseTX half

Viewing valid media types for an interface

You can use tmsh to view the valid media types for an
interface.

Note: This platform might not support all of the media
type options that are available in tmsh.

Open the Traffic Management Shell (tmsh).

tmsh

Change to the network module.

net

The system prompt updates with the module name:
user@bigip01(Active)(/Common)(tmos.net)#

Display the valid media types for a specific interface.

list interface <interface_key> media-capabilities

Important: In all Gigabit Ethernet modes, the only valid
duplex mode is full duplex.

This is an example of the output that you might see when you
run this command on interface 1.3:

About 40GbE QSFP+ interfaces

On platforms that include QSFP+ interface ports, you can use the ports as a
single 40GbE port or as four 10GbE SFP+ ports.

The QSFP+ ports (2.5 and 2.6) default to 40GbE. The cable that you use when
operating at 40GbE is an industry-standard OM3 qualified multi-mode fiber
optic cable with female MPO/MTP connectors at both ends. You must provide your
own cable for 40GbE operation.

You can also disable the 40GbE bundle and use them as individual 10GbE ports
(1.1-1.4, 1.5-1.8, 1.9-1.12, and 1.13-1.16) using a QSFP+ breakout cable. This
cable has a female MPO/MTP connector at one end, which connects to the QSFP+
port, and four LC duplex connectors at the other end, which connect to SFP+
modules on an upstream switch.

Note: If you are using a breakout cable for 10GbE
connectivity, you should use the supported distance as detailed in the
Specifications for fiber QSFP+ modules section of this platform
guide and not the Specifications for fiber SFP+ modules section.

An example of a QSFP+ breakout cable

You can order these QSFP+ components from F5®
Networks:

QSFP+ breakout cables (MTP to LC), provided as a pair, in these lengths:

1 meter (F5-UPG-QSFP+-1M-2)

3 meter (F5-UPG-QSFP+-3M-2+)

10 meter (F5-UPG-QSFP+-10M-2)

F5-branded 40GbE QSFP+ transceiver modules (F5-UPG-QSFP+)

Configuring bundling for 40GbE QSFP+ interfaces using tmsh

You can use tmsh to configure bundling for the 40GbE
QSFP+ interfaces on a platform. When you disable bundling, you can use the
40GbE ports as individual 10GbE ports.

Open the Traffic Management Shell (tmsh).

tmsh

Change to the network module.

net

The system prompt updates with the module name:
user@bigip01(Active)(/Common)(tmos.net)#

Configure bundling for a specific interface, where
<interface_key> is 2.1, 2.2, 2.3, or 2.4.

modify interface <interface_key> bundle [enabled | disabled]

Note: When a 2.x port is bundled, the LEDs for the
10GbE ports remain OFF. When a 2.x port is unbundled, the 40GbE LEDs
remain OFF.

Configuring bundling for 40GbE QSFP+ interfaces using the Configuration utility

You can use the BIG-IP® Configuration utility to
configure bundling for the 40GbE QSFP+ interfaces on a platform. When you
disable bundling, you can use the 40GbE ports as individual 10GbE ports.

On the Main tab, click
Network > Interfaces > Interface List.

This displays the list of available interfaces.

Click an interface name.

The properties screen for that interface opens.

For the Bundled setting, select whether to
enable or disable bundling.

Click Update.

Network interface LED behavior

The appearance and behavior of the network interface LEDs on the platform
indicate network traffic activity, interface speed, and interface duplexity.

Transceiver module specifications

For current specification information for optical transceivers that are
supported by this platform, see F5® Platforms:
Accessories.

Cable pinout specifications

For current pinout information for this platform, see F5®
Platforms: Accessories.

Always-On Management

The Always-On Management (AOM) subsystem enables you to manage the system remotely using
serial console or SSH, even if the host is powered down. The AOM Command Menu operates
independently of the Traffic Management Operating System®
(TMOS®).

You can use the command menu to reset the unit if TMOS has locked up, or get access to
TMOS directly, so that you can configure it from the command-line interface.

Note: The available functionality and options in AOM vary depending on the
platform type.

AOM Command Menu options

The AOM Command Menu provides the AOM options for the platform. You can
access the AOM Command Menu using either a serial console or SSH.

Note: The availability of menu options varies depending on the
platform type.

Letter

Option

Description

B

Set console baud rate

Configures the baud speed for connecting to AOM using the serial
console. Select from these options:

9600

19200 (default)

38400

57600

115200

I

Display platform information

Displays information about the AOM firmware and bootloader,
chassis serial and part numbers, blade serial number, MAC address,
and power status for the active console.

P

Power on/off host subsystem

Powers the host subsystem on or off.

R

Reset host subsystem

Resets the host subsystem with a hardware reset.

Important: F5® does not recommend
using this option under typical circumstances. It does not allow
for graceful shutdown of the system.

N

Configure AOM network

Runs the AOM network configuration utility. This utility enables
you to reconfigure the IP address, netmask, and default gateway used
by AOM. If you use this option while connected using SSH, your session
will be disconnected as a part of the network configuration operation.